asp-siem-search

asp-siem-search explores ASP SIEM schemas, searches logs, runs adaptive queries, SPL, ES|QL, and field discovery.

Invocation

/asp-siem-search

The agent chooses asp siem ... --output json commands based on the data source type and should prefer bounded time ranges.

Common Examples

/asp-siem-search search for 1.2.3.4 from yesterday 00:00 to 01:00

/asp-siem-search show the schema for logs-security

/asp-siem-search run an adaptive query on logs-security using filters.json

Related CLI commands:

asp siem search keyword 1.2.3.4 --from 2026-07-02T00:00:00Z --to 2026-07-02T01:00:00Z --output json
asp siem schema show logs-security --output json
asp siem query adaptive logs-security --from 2026-07-02T00:00:00Z --to 2026-07-02T01:00:00Z --filters-file filters.json --output json